One immutable audit trail entry.
readonly
action: string
The action performed (e.g. "user.delete").
readonly
resource: string
The resource kind acted on (e.g. "user").
readonly
optional
resourceId: string
The specific resource instance, when applicable.
readonly
optional
userId: string
The acting principal's ID.
readonly
result: "success" | "failure"
Whether the action succeeded.
readonly
optional
before: Readonly<Record<string, unknown>>
Resource state before the action.
readonly
optional
after: Readonly<Record<string, unknown>>
Resource state after the action.
readonly
optional
metadata: Readonly<Record<string, unknown>>
Additional context (IP, request ID, …).